Legal
Privacy Policy
Last updated: 26 October 2026
This Privacy Policy explains how Golden Game Company LLC collects, uses, shares and protects your personal data when you use goldengame.co, our newsletter, playtests, Discord community and related services (the "Services"). It is written to comply with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations, and follows the principles of the EU General Data Protection Regulation (GDPR) for visitors outside the Kingdom.
Company Information (Data Controller)
- Legal name: Golden Game Company LLC
- TIN: 314364856
- Registered Office: Building 3215, Hisham Ibn Abdul Malik Street, Al Mursalat District, Riyadh, Kingdom of Saudi Arabia
- Privacy contact: admin@goldengame.co
Golden Game Company LLC ("GGC", "we", "us") is the controller responsible for your personal data.
1. Personal Data We Collect
| Source | Data | When |
|---|---|---|
| Newsletter | Email address, preferred language | When you subscribe |
| Playtest applications | Name, email, age confirmation, country, Discord username, Steam profile or ID, hardware/platform details, gaming preferences | When you apply to test a build |
| Playtest participation | Feedback, survey answers, bug reports, crash logs, gameplay and performance data from test builds | During a test |
| Contact and press inquiries | Name, email, company or outlet, message content | When you contact us or request press access |
| Careers | CV, contact details, portfolio links and any other information you send | When you apply for a role |
| Discord community | Username, user ID, messages and reactions in our server | When you join or post |
| Website analytics | IP address, approximate location, browser and device type, pages visited, referring site, time on page | Automatically, when you visit the site |
We do not knowingly collect sensitive data (such as health, religious or biometric data) or payment card details. Game purchases are processed by Steam or other storefronts, not by us.
2. Why We Use Your Data
| Purpose | Legal basis |
|---|---|
| Running playtests and selecting testers | Your consent; performing our arrangement with you |
| Improving our games from feedback and test data | Our legitimate interest in developing our games |
| Sending news, updates and launch announcements | Your consent (you can unsubscribe at any time) |
| Answering inquiries from players, press, publishers and investors | Our legitimate interest; steps before a contract |
| Reviewing job applications | Steps before a contract; your consent |
| Moderating our Discord and keeping the community safe | Our legitimate interest; enforcing our Terms of Service |
| Measuring and improving website performance | Your consent for non-essential cookies |
| Meeting legal, tax and regulatory obligations | Legal obligation |
We only collect data that is necessary for these purposes and do not use it for unrelated purposes without telling you first. We do not make decisions about you based solely on automated processing.
3. Sharing Your Data
We do not sell, rent or trade your personal data. We share it only as follows:
- Service providers who process data on our behalf under written agreements: website hosting, email and newsletter delivery, analytics, form and survey tools, and build distribution.
- Platforms you use to engage with us, such as Steam (to issue playtest keys) and Discord (to run our community). These platforms also act under their own privacy policies.
- Publishers, investors and partners, only in aggregated or anonymised form (for example, playtest participation numbers), unless you have agreed otherwise.
- Authorities, where required by Saudi law, a court order or a lawful request from a competent government body.
- A successor, if GGC is involved in a merger, acquisition or sale of assets, subject to this Policy.
4. International Data Transfers
Some of our service providers and platforms (for example, hosting, analytics, Steam and Discord) store or process data outside the Kingdom of Saudi Arabia. When we transfer personal data outside the Kingdom, we do so in line with the PDPL and its Regulation on Personal Data Transfer outside the Kingdom: we transfer only the minimum data needed, to providers that offer an adequate level of protection or under appropriate safeguards such as standard contractual clauses.
5. How Long We Keep Your Data
| Data | Retention |
|---|---|
| Newsletter email | Until you unsubscribe |
| Playtest applications and feedback | Up to 24 months after the test ends, or until you ask us to delete it |
| Contact, press and business inquiries | Up to 24 months after our last communication |
| Job applications | Up to 12 months after the hiring decision, unless you are hired |
| Analytics data | Up to 14 months, in aggregated form after that |
| Records required by law (e.g. tax and accounting) | For the period required by Saudi law |
When data is no longer needed, we securely destroy or anonymise it.
6. How We Protect Your Data
We use appropriate technical and organisational measures to protect your data, including HTTPS encryption across the website, access controls limited to staff who need the data, and providers with recognised security standards. No system is completely secure. If a data breach is likely to harm you, we will notify the Saudi Data & AI Authority (SDAIA) and, where required, you, within the periods set by the PDPL.
7. Cookies and Analytics
We use:
- Essential cookies needed for the website to work and stay secure. These cannot be switched off.
- Analytics cookies that help us understand how visitors use the site. We set these only with your consent, which you can give or withdraw through the cookie banner or your browser settings.
Embedded content, such as YouTube trailers or Steam widgets, may set its own cookies under that provider's policy. You can block or delete cookies in your browser settings; some features may then not work.
8. Your Rights Under the PDPL
You have the right to:
- Be informed of the legal basis and purpose for collecting and processing your personal data.
- Access your personal data held by us and receive a copy of it in a readable format.
- Correct personal data that is inaccurate, incomplete or out of date.
- Request destruction of your personal data when it is no longer needed, subject to any legal requirement to keep it.
- Withdraw consent at any time where we rely on consent, without affecting processing already carried out. You can unsubscribe from emails using the link in every newsletter.
- Object to processing based on our legitimate interests, and to direct marketing at any time.
Visitors in the EU, UK or other regions may also have rights under their local laws, such as data portability and restriction of processing.
To exercise any right, email admin@goldengame.co with the subject "Privacy Request". We may ask you to verify your identity. We will respond within 30 days, as required by the PDPL Implementing Regulations, and will tell you if we need more time.
If you are not satisfied with our response, you may file a complaint with the Saudi Data & AI Authority (SDAIA), the competent authority under the PDPL.
9. Children's Privacy
The Services are not directed at children under 13, and we do not knowingly collect their personal data. Playtest applicants under 18 must have permission from a parent or legal guardian. If you believe a child under 13 has given us personal data, contact us and we will delete it.
10. Changes to This Policy
We may update this Policy to reflect changes in our Services or the law. The "Last updated" date at the top shows the latest version. If changes are material, we will post a notice on the website or notify you by email before they take effect.
11. Contact Us
For any question about this Policy or your personal data:
- Golden Game Company LLC
- Registered Office: Building 3215, Hisham Ibn Abdul Malik Street, Al Mursalat District, Riyadh, Kingdom of Saudi Arabia
- TIN: 314364856
- Privacy contact: admin@goldengame.co
© 2026 Golden Game Company LLC. All rights reserved.